Fake PayPal Email.... Please Read

an0key

Hi all,

Just received yet another fake email about my PayPal account...

When you click the link it takes you to a site http://www.pharm21.com/https/www.paypal.com/secure/ssl/paypal/trusted/resolution_center/confirm/index.php and all looks very convincing, until you get to the "security questions" which ask for every detail going including your ATM pin... oh well look at for an email like below:

---

Dear xxx,

We recently reviewed your account, and suspect that your PayPal account may
have been accessed by an unauthorized third party. Protecting the security
of your account and of the PayPal network is our primary concern.
Therefore, as a prevention measure, we have temporarely limited access to
sensitive PayPal account features.
Please click on the link below to confirm your information:

https://www.paypal.com/cgi-bin/webscr?cmd=_login-run

For more information about how to protect your account, please visit
PayPal's Security Center, accessible via the "Security Center" link located
at the bottom of each page of the PayPal website.

We apologize for any inconvenience this may cause, and appreciate your
assistance in helping us maintain the integrity of the entire PayPal
system. Thank you for your prompt attention to this matter.



Sincerely,

The PayPal Fraud Management Team




Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the header of any page.
Copyright © 2005 PayPal, Inc. All rights reserved. Designated trademarks and brands are the property of their respective owners.

---

Mr_Skint_2

Ive just sent an e-mail to the company pharm21 warning them, Hope they
get the point.

masonic

Mr_Skint wrote:

Ive just sent an e-mail to the company pharm21 warning them, Hope they
get the point.

I hope you sent it in Japanese!
Looks like they will either be sacking one of their webmasters or they already know about it. Can't really tell if they are a reputable company or not from the webpage.

innovate

an0key wrote:

.....and all looks very convincing, until you get to the "security questions" which ask for every detail going including your ATM pin...

If you click on the link in the original post, do not enter your ID and password - chances are they harvest all your info there and then!!! :eek:

If you have entered it and continued (logged in), change your Paypal password NOW and monitor your account (plus credit card/bank account), plus take other precautionary measures!

Mr_Skint_2

How can they, nowts downloaded and no info given.

innovate

The Paypal ID and PW can easily be harvested - they don't need much more!

You are entering this information on the pharm21 site, NOT on the Paypal site!!!

innovate

OK, I "logged in", using

Email id: ustupid@nil.com
PW: hahaha

Of course I got straight "into Paypal" - - and I bet you, by now they have ustupid@nil.com with password hahaha recorded!

Anyone using their REAL id and password is extremely exposed!

belfastgal

innovate wrote:

OK, I "logged in", using

Email id: ustupid@nil.com
PW: hahaha

Good One ! that email looked real enough to me.....Grrrr !!!!

innovate

an0key, I suggest you remove the bad link from your post without delay, to protect people who trust MSE members!

an0key

Anyone would think I was trying to help.

soolin

an0key wrote:

Anyone would think I was trying to help.

Hey, sorry if you think we were harsh. If you have enough email accounts you will soon see several of these spoof mails a day, so some of us are used to seeing them over and over again and we forget that some people might still wonder if they are genuine. Apologies.

Read through some of the posts on the sticky thread about paypal/ebay spoof mails and remember to keep alert and never click on a link in a mail.

None of these phishing mails are particularly clever, they all rely on the receiver not keeping themselves secure. Even the one i mentioned with the trojan surprised me, it was the first time that McAffee had flagged up a virus on a phishing mail, usually it downloads them quite happily and i just delete them.

Keep safe,